Novell CLIENT FOR LINUX 2.0 SP1 - ADMINISTRATION, Administration Manual

Page: 31 / 89

Managing Login 31
n
ov
do
cx (e
n)
11
Ju
ly 20
08
#FW_CUSTOMRULES="/etc/sysconfig/scripts/SuSEfirewall2-custom"
FW_CUSTOMRULES=""
to
FW_CUSTOMRULES="/etc/sysconfig/scripts/SuSEfirewall2-custom"
#FW_CUSTOMRULES=""
2 Modify the
/etc/sysconfig/scripts/SuSEfirewall2-custom
file.
In
fw_custom_before_denyall()
add the following:
iptables -I INPUT 1 -j ACCEPT -p udp --sport 427
That will make SLP lookups work properly.
Adding SLP Daemon Rules for External or DMZ Firewall Zones
1 Launch the YaST Control Center.
GNOME: Click Computer > More Applications > System > YaST .
KDE: Click the menu button > System > YaST .
2 Click Security and Users in the left column, then click Firewall in the right column.
3 Click Allowed Services in the left column to open the Firewall Configuration: Allowed
Services screen.
4 Select SLP Daemon from the Service to Allow drop-down menu, then click Add .
5 Click Next , then click Accept .
Changing Your LAN Interface Definition to Internal
1 Launch the YaST Control Center.
GNOME: Click Computer > More Applications > System > YaST .
KDE: Click the menu button > System > YaST .
2 Click Security and Users in the left column, then click Firewall in the right column.
3
Click Interfaces in the left column, double-click your LAN interface, then select Internal Zone
from the drop-down menu.
4 Click OK , then select Start-Up in the left panel.
5 Click Save Settings and Restart Firewall Now .
6 Click Next , then click Accept .